users

users copied to clipboard

CakePHP 4.3 deprecation

2

When running CakeDC/Users version 9.2.1 and CakePHP 4.3.1 the following message is outputted ``` CAKE/Core/functions.php:322 Colon prefixed route placeholders like `:foo` are deprecated. Use braced placeholders like `{foo}` instead. -...

challgren

ajibarra

Feature request - Disable social routes if social login is disabled

2

Could you only add social related routes if social login is enabled? Something like what you do with oauthPath in [routes.php#L38](https://github.com/CakeDC/users/blob/master/config/routes.php#L38). I was about to make a PR with ```php...

hacheraw

The config variable `Auth.authenticate.*` was removed in version 9.* but is still used in `CakeDC\Users\Controller\Traits\ProfileTrait` https://github.com/CakeDC/users/blob/948b7a5fa070e56c29ca382462660c83f29906af/src/Controller/Traits/ProfileTrait.php#L44 If you use the `Auth.authenticate.*` bootstrap.php triggers a notice. https://github.com/CakeDC/users/blob/948b7a5fa070e56c29ca382462660c83f29906af/config/bootstrap.php#L29-L41

haraldernst

Improve OTP code to handle session data in OneTimePasswordVerifyTrait not in LoginTrait

2

This is related to #988 and more items. - Move session delete ` $this->getRequest()->getSession()->delete(AuthenticationService::TWO_FACTOR_VERIFY_SESSION_KEY);` from LoginTrait::login to OneTimePasswordVerifyTrait - On verification page instead of redirecting to login after invalid code...

rochamarcelo

Add new flash config to use when logged. Ref: https://github.com/CakeDC/users/blob/master/src/Middleware/UnauthorizedHandler/DefaultRedirectHandler.php#L111

rochamarcelo

Updated doc `Using the user's email to login` to include required config for 'Remember me'. Related to issue #992

rochamarcelo

arodu

2FA (TOTP and U2F) on a per user basis

4

Hello, This is related to #404 :wink: It would be great if both U2F and TOTP second factor authentication could be enabled on a per user basis. Right now, when...

jtraulle

Passwordless Authentication

3

Currently the login page requires to use password, it would be nice to have a way to authenticate without it. Passwordless authentication can be implemented using E-mail Message, SMS, WebAuthn,...

rochamarcelo